Re: Logging/backup .ksh_history

[Dmitrij D. Czarkoff]

Francois Pussault  wrote:

>> On 2016-08-08 Mon 14:39 PM |, johnw wrote:
>>> Hi, I use /bin/ksh as a console/terminal shell program, I want to
>>> log/backup all command, run on console/terminal/ksh,
>>>
>>> Any idea how to do this?
>>>
>>
>> See HISTFILE and HISTSIZE in ksh(1).
>
> Using Ksh options is a good idea but that logs only the current user.

You may set HISTFILE and HISTSIZE in doas.conf(5).

Re: Copy-Paste not possible from a xterm

[Dmitrij D. Czarkoff]

"Stefan Wollny"  wrote:

>For some time now I cannot copy-paste text from a xterm \
>window by simultaneously pressing
>left and right mouse buttons.
>
>Anyone an idea?

>From mouse(4):

|   Option "Emulate3Buttons" "boolean"
|  Enable/disable the emulation of the third (middle) mouse
button
|  for mice which only have two physical buttons.  The third
button
|  is emulated by pressing both buttons simultaneously.  Default:
|  on, until a press of a physical button 3 is detected.
Property:
|  "Mouse Middle Button Emulation"

Re: Small fix for www/faq/faq7.html

[Dmitrij D. Czarkoff]

Theo Buehler  wrote:

>Yes, of course, but the problem with adding the section numbers is that
>
>http://man.openbsd.org/doas.8;>doas(8)
>
>won't work, while the mistake
>
>http://man.openbsd.org/doas;>doas(8),
>
>still produces what I want.  That's why I don't think that adding the
>numbers to the link, unless they are actually needed, is a good idea.
>That's all.

This is actually a good argument to use section numbers in all links.

Re: DNS servers around here not working for days. dig works. fix?

[Dmitrij D. Czarkoff]

Chris Bennett said:
> Neither 8.8.8.8 or 8.8.4.4 works.

What does that mean, precisely?  Can you ping them?

-- 
Dmitrij D. Czarkoff

Re: DNS servers around here not working for days. dig works. fix?

[Dmitrij D. Czarkoff]

Chris Bennett said:
> This happens here in Mexico and also in Guatemala.
> But it has been about five days now. Enough!
> 
> dig works fine, locally and using the server my USA website uses.
> I tried adding that to /etc/resolv.conf and .tail but no help.
> whois fails.
> Digging every site I want to use is a pain and many won't work from IP.
> 
> I am coming through wifi with NAT that I do not control.
> 
> Any fixes to this problem.

echo -e "1i\nnameserver 8.8.8.8\n.\nwq" | doas ed /etc/resolv.conf.tail

-- 
Dmitrij D. Czarkoff

Re: I need to get a Russian keyboard

[Dmitrij D. Czarkoff]

Chris Bennett said:
> Is setxkbmap ru going to do the trick or will I need to do something
> else also or instead?

"setxkbmap ru" will set standard "Windows" Russian layout which is
printed on keyboards in Russia.

FYI there is a set of "phonetic" layouts that map Russian Cyrillic
glyphs to similarly looking or sounding native keys.  These are readily
available for several layouts:

  $ sed -En '/Russian.+phonetic/s/.+: //p' 
/usr/X11R6/share/X11/xkb/rules/base.lst
  Russian (US, phonetic)
  Russian (Czech, phonetic)
  Russian (Germany, phonetic)
  Russian (Poland, phonetic Dvorak)
  Russian (phonetic)
  Russian (phonetic WinKeys)
  Russian (phonetic azerty)
  Russian (phonetic French)
  Russian (Sweden, phonetic)
  Russian (Sweden, phonetic, eliminate dead keys)

I personally use Yugoslav keyboard with my custom layout based on
standard Yugoslav Cyrillic rules.  Having same keys for punctuation make
typing in several languages much less painful.

> Any advice on what to be sure to find or not find on a keyboard?

All keyboards produced for Russia in last 15 to 20 years are identical
in terms of layout.  Be aware that some keyboards come with Russian
glyphs as pre-applied labels.  These don't last long.

-- 
Dmitrij D. Czarkoff

Re: light browsers

[Dmitrij D. Czarkoff]

sogal said:
>> Basically anything that is using webkit is going to have issues:
>> https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/
>> 
>> This means, xombrero, luakit, probably all the others that aren't
>> firefox and chromium.
> 
> Thanks for the interesting link.
> The xombrero "security" features lie in the default settings and the
> possibility to harden them regarding to privacy issues.
> 
> But indeed, it seems that every single Webkit(Gtk) web browser is broken
> which leaves us with very few choice.

You must face the reality:  all web browsers are broken.  Modern web
rendering engines are too complex and too fast-moving to be securable at
all.  Mozilla and Google made every effort to ensure that nobody can
ever be safe.

Webkit1-based browsers (Luakit, Midori, surf, Vimb and Xombrero) use
unmaintained engine, so nobody fixes even known issues.  People who care
about security should probably avoid these.

AFAIK situation is similar for QTWebKit (Otter).

Situation with Webkit2 (Epiphany and surf2) is a bit better.  It is
actively developed, and some issues get fixed.  But GTK+ port - the one
we can use - is undermanned and Linux-centric.  It has issues.

XUL (Firefox and SeaMonkey) and Blink (Chromium and Iridium) are in
better shape, so there issues there are probably fewer.  But there still
are issues.  And we are not top priority platform for either, so
upstream does not care much whether things work for us or not.  And
these are primary targets for bad guys, so those fewer issues have
higher chances of being exploited.


Thuban said:
> w3m already has been mentionned on the list. With some time, it becomes
> very handy.
> 
> But what about netsurf?

FWIW there is no reason to believe that situation with w3m, netsurf,
dillo, lynx and numerous links forks is better.  These browsers support
smaller subset of HTML/CSS/JS specs then major browsers do, but their
developer teams are yet smaller, and their security was never studied
in detail.  They may be just as broken as major browsers.  Who knows?


There is no safe bet here.  Pick whatever you want, and you'll loose
eventually.  Or maybe you won't, but only if you are lucky enough.
Parsing HTML manually is probably the safest option, albeit ugly.  You
will still suffer from bugs in your HTTP(S) tool though.

-- 
Dmitrij D. Czarkoff

Re: Swift?

[Dmitrij D. Czarkoff]

Devin Ceartas said:
> Can you run Swift on OpenBSD?

No, we don't run birds.

-- 
Dmitrij D. Czarkoff

Re: Can't use sshfs as user

[Dmitrij D. Czarkoff]

Thuban said:
> Oh, that was it.
> It works after a
> # chmod 666 /dev/fuse0
> 
> Not sure it's really secure thought.

You only need 660 and your user in 'wheel' group.

-- 
Dmitrij D. Czarkoff

Re: how to send email via Mail

[Dmitrij D. Czarkoff]

Jaap Bosman said:
> In man mail(1) it is not clear to me that mail(1) is not for use outside
> a local network.

Strictly speaking mail(1) is not for use over network at all: it reads
local mailbox and sends mail via MTA.  It does not do networking on its
own.

> Why do I want to use mail(1) as an email client? I try to understand
> openBSD by playing around with it.

Well, most likely you don't because mail(1) lacks some features one
would expect from modern MUA: MIME, Maildir, references, caching.  If
neither of these is critical for you, mail(1) may be a good choice
because of its simplicity.

-- 
Dmitrij D. Czarkoff

Re: GUI Designer

[Dmitrij D. Czarkoff]

Roderick said:
> Tcl is a scripting language, on one side like scripting languages
> (sh, perl), on the other side like LISP. It is meager, with a clear
> concept and very easy to learn. Tk is the GUI Toolkit.

FWIW Tk is really simple enough that you don't need any GUI designer
application.  It is native to TCL, and it can be used just as easily
from python via Tkinter, which is part of python's standard library.

-- 
Dmitrij D. Czarkoff

Re: text-mode gui

[Dmitrij D. Czarkoff]

Luke Small said:
> I don't know the best way, but I like how there are "check-boxes", from
> what I recall, in lynx webpages.

OpenBSD installer solves the checkbox problem by asking questions with
default answer printed in square brackets.

> If there are other things, then it may become a little less tedious
> for less experienced folks to look at all the options at once, rather
> than having to start over.

You may want to change your keyboard layout after partitioning disk?  Or
maybe ability to autostart xdm convinces you that adding non-root user
was not a good idea?  What exactly are the cases when you needed to
start over?

> If there are any irreconcilable differences in options, JavaScript can
> more easily display that the other changes are incompatible by
> changing the other options back.

Lynx doesn't support JavaScript.  And even if it did, it is not a part
of OpenBSD any more.  But even if it was, automatic resetting
user-configured options to defaults would turn installer into a
whack-a-mole game.  Not an improvement.

FWIW the only incompatible options in installer right now are using
whole disk and using dedicated partition, and the choice doesn't require
JavaScript.  See, in OpenBSD we try to make our "solutions" adequate to
problems we are solving.  Curses-based interface would do better job of
the installer you describe, but even that is an overkill, as simple
line-oriented interface is sufficient for the job.  I would argue that
curses-based interfaces tend to require more user interaction then our
installer.

> Things like not having softdep mounted file systems by default really
> tripped me up for a couple versions.  I have virtualbox HDs and I had
> to keep backups in case Windows did something funny, because I
> sometimes couldn't repair the file systems. It seems like something
> that should be an option in the installer, or a default. It would be
> nice to do that with noatime and maybe an optional mfs or tmpfs
> mounted /tmp folder like I have now.

So your issue with installer is not about forms and checkboxes, but
rather about the set of options you want to tune.  As you may know,
there is quite a lot of settings that you may tune in OpenBSD; we put
considerable effort into making sane defaults, but user's needs may
differ from common scenarios.  As you may also know, users' needs may be
very different, so the range of potential installer questions is huge.
If user needs something we don't do by default, we assume that he got
himself familiar with his problem and can solve it after installation is
complete.  This way we make the installation process really fast for
those who don't need to tune anything, and allow users to make detailed
configuration when needed, without limiting them to question-answer
interface of installer.

Switching installer to curses-based interface, or even to lynx+cookies
scheme you suggested won't affect the choice of installation options,
because the principle of installer's operation - questions and answers -
won't be altered.

-- 
Dmitrij D. Czarkoff

Re: text-mode gui

[Dmitrij D. Czarkoff]

Luke Small said:
> There are other features that inexperienced users could benefit from, like
> selecting a mirror for PKG_PATH and putting it into .profile . I think that
> it would be convenient to be able have a new user not to have to wade
> through man pages to learn about "echo " PKG_PATH..." >> /root/.profile" or
> learn vi to install kde or gnome or an easier to use text editor like pico.
> I suspect you are driving away folks by making it only useable by folks
> that REALLY want to use it and it doesn't have to be that way.

Ironically installer creates /etc/pkg.conf with package path set to
mirror used during installation.  That puts "easier" editors like pico,
as wel as gnome and kde, just one pkg_add away.

On the other hand, if someone doesn't want to learn shell syntax and
other Unix basics, we would do a misservice by hiding the fact that this
knowledge is strictly necessary on OpenBSD.

-- 
Dmitrij D. Czarkoff

Re: Booting Live openbsd image on fat32 media

[Dmitrij D. Czarkoff]

Mohammad BadieZadegan said:
> How put OpenBSD image on it that don't curropt its file system or booting
> OpenBSD?

The easiest way is to split your drive in two partitions: first one
should be FAT32 if you want it so, and the last one should be OpenBSD
slice.

Windows and most consumer devices' firmwares don't read partition table
on USB flash devices, so these systems won't notice your OpenBSD
partition, but it will be bootable.

-- 
Dmitrij D. Czarkoff

Re: Booting Live openbsd image on fat32 media

[Dmitrij D. Czarkoff]

Mohammad BadieZadegan said:
> 1.What tools can do that best?

OpenBSD installation medium can do all but formatting FAT32 partition.
You can do that from system you'll install on the second partition.

> 2.What is the size of partitions?

Depends on your needs.  Most likely you'd want to mount your FAT32
partition somewhere under you user's home directory, so basically you
can take the numbers from FAQ and adopt them to your needs.

> 3.How can write OpenBSD memstick image on the last partition?

Best way to do it is just to use stock openbsd installer.  If you don't
like this approach for some reason, you may dd your flash drive to a
file, use some virtualization software to install everything you want
there and dd the image back.

There is a choice of tools for these tasks for all major operating
systems, and there is a lot of documentation, blog posts, howto articles
and other sources of information on this topic, you so shouldn't have
problems with finding out details.

-- 
Dmitrij D. Czarkoff

Re: Dual Booting OpenBSD vs Windows7

[Dmitrij D. Czarkoff]

mbzade...@gmail.com said:
 suggestion 1 about active partition did not work for me

Details?

 suggestion 3 is completely wrong!

Details?

I've tried these options, and they worked as charm.

-- 
Dmitrij D. Czarkoff

Re: UPDATE: www/vimb 2.9 = 2.10

[Dmitrij D. Czarkoff]

Brian Callahan said:
 Not quite with removing patches/patch-Makefile though: the install
 routine uses a GNU install extension (-D). So a patch needs to exist
 removing that.

Actually not: ports call /bin/install via wrapper that strips unknown
options.

-- 
Dmitrij D. Czarkoff

Re: Package for taking a picture

[Dmitrij D. Czarkoff]

STeve Andre' said:
 I'm looking in the ports tree for something to test a camera that shows up
 as uvideo0.

You can use video(1) from base system for testing.

-- 
Dmitrij D. Czarkoff

Re: SAMBA CIFS/SMBMOUNT

[Dmitrij D. Czarkoff]

Max Power said:
 How to mount shared device via samba fs?

You may use sharity-light package.

-- 
Dmitrij D. Czarkoff

Re: Blob-free OpenBSD kernel needed

[Dmitrij D. Czarkoff]

Stefan Sperling said:
 On Sat, Jun 06, 2015 at 12:44:55AM -0300, Michel Behr wrote:
  If you want HW freedom, I think the viable way is this:
  https://www.crowdsupply.com/purism/librem-15#products-top
 
 Nice try but I don't think countrygeek would be happy with this machine.
 
 
 What About the BIOS and firmware?
 
 Though the bootloader, Linux kernel, GNU OS, and all software
 applications are completely free/libre software without any binary
 blobs, the BIOS which does use free/libre and open source coreboot, does
 include a binary from Intel, called FSP. 
 

They admit that their hardware has vendors' firmware as well:

| There are also hardware components, like the HD or SSD, that are
| flashable, and therefore upgradeable, but that currently run firmware
| that is not yet freed.

-- 
Dmitrij D. Czarkoff

Re: help setting up ralink rt3290 compatible wifi drivers?

[Dmitrij D. Czarkoff]

Joel Rees said:
 Do you have debian running to do the extraction? (I do have wheezy
 running on a different box, but it would be interesting to know what
 tools you used.)

You may use ar(1).

-- 
Dmitrij D. Czarkoff

Re: Phone suggestion.

[Dmitrij D. Czarkoff]

Gareth Nelson said:
 Is it theoretically possible to boot an OpenBSD kernel on an average
 android device?

TLDR: this requires a lot of work and provides much less then expected
in exchange.

That would require a lot of drivers which we don't have.  Even
aftermarket Android firmware uses binary blobs from vendors for hardware
support (which is actually a major roadblock for aftermarket firmware
development for cheaper Android devices, like those based on Rockchip's
SoCs).  So in practice it is very difficult to get OpenBSD running on an
Android phone, even ignoring the fact that we lack software for making
phone calls, etc.

Interaction between OpenBSD as user-facing OS and RTOS that manages
cellular hardware would probably be the another big issue issue.  Again,
there's little to no documentation on topic, so OpenBSD on phone port
does not look overly feasible.

Lastly, running OpenBSD as user-facing OS is not particularly useful, as
RTOS that runs cellular operations normally has direct write access to
RAM of user-facing OS.  That means that whatever firmware user installs,
he is basically defendless against cellular operators and whatever
bodies that can gain data from those.  That also means that exploiting
vulnerability in RTOS would allow an attacker direct privileged access
to RAM, which effectively discards most security measures of user-facing
OS.  Provided that RTOS is actually in between user-facing OS and
internet connection, that creates a huge attack vector which can't be
dealt with by installing OpenBSD-based firmware.

-- 
Dmitrij D. Czarkoff

Re: Phone suggestion.

[Dmitrij D. Czarkoff]

M Wheeler said:
 Android is the most targeted platform by malware by a massive degree.
 Whatever you do, don't get an android.

This is not supported by evidence.  Actually, only vendors of
antivirus software for android really claim any meaningful amount of
malware, and even then they fail to point at anything in particular.

-- 
Dmitrij D. Czarkoff

Re: Rust programming language

[Dmitrij D. Czarkoff]

Lampshade said:
 Do you think that learning Rust can be good for educational purposes?

Learning anything is good for educational purposes.

-- 
Dmitrij D. Czarkoff

Re: C++14 and C11 support sucks in OpenBSDs default compiler - any chance of Clang in base?

[Dmitrij D. Czarkoff]

Some Developer said:
 So what are the reasons why OpenBSD has so far shunned Clang and LLDB? Is it
 missing some extra security features that the OpenBSD team have added to
 their version of GCC?

First and foremost it is missing platform support.

-- 
Dmitrij D. Czarkoff

Re: Quick OpenBSD/thinkpad question

[Dmitrij D. Czarkoff]

m...@jeremiahford.com said:
 My question is; Does anyone have any insight into these claims, whether it
 be proving or disproving?

With amount of firmware in laptops these days I guess it is effectively
impossible to disprove backdoor claims.

Jiri B. said:
 There are two kinds of this attacks - hardware or software.

Hardware attacks?  With flamethrowers?

-- 
Dmitrij D. Czarkoff

Re: Audio probles like, slow response in applications that use audio

[Dmitrij D. Czarkoff]

Henrique Lengler said:
 I tried some browsers like (firefox, midori and chromium), and they get
 really slow when I am watching a html5 video, and it freezes all the
 time if the video is in HD.

If the performance issue depends on video resolution, most likely you
experience problems with hardware graphics acceleration.

Do other GStreamer-based programs play the same videos fine?  What about
non-Gstreamer software, eg. ffplay from ffmpeg?

-- 
Dmitrij D. Czarkoff

Re: pkg_add failure in March 1 snapshot

[Dmitrij D. Czarkoff]

Marc Espie said:
  I believe this is reported when $PKG_TMPDIR isn't writable.
 
 Definitely looks like somebody had fun with his /var/tmp - /tmp change... :p

Not me.  I didn't even touch either directory neither before nor after
the breakage.

-- 
Dmitrij D. Czarkoff

Re: iwn(4) firmware

[Dmitrij D. Czarkoff]

Jan Stary said:
 http://www.openbsd.org/faq/faq6.html#Wireless
 lists the supported wireles chipsets, marking with NFF
 those that need the non-free firmware to be downloaded.
 
 It does not mark iwn(4) as such,

It should.

-- 
Dmitrij D. Czarkoff

Re: pkg_add failure in March 1 snapshot

[Dmitrij D. Czarkoff]

Adam Wolk said:
 Is the issue reproducible? Maybe it was a temporary network glitch?

I can access this repository just fine, it isn't empty, and the same
happens with other repos.

-- 
Dmitrij D. Czarkoff

Re: pkg_add failure in March 1 snapshot

[Dmitrij D. Czarkoff]

Dmitry Orlov said:
 (i386) snapshot and amd64 packages ?
 :http://ftp5.eu.openbsd.org/ftp/pub/OpenBSD/snapshots/packages/amd64/

No, amd64 everything.

I updated again (from another mirror, which shouldn't matter), and now
everything is fine.

-- 
Dmitrij D. Czarkoff

pkg_add failure in March 1 snapshot

[Dmitrij D. Czarkoff]

Hi!

I've updated to March 1 snapshot, and after sysmerge tried to update
packages.  What I got was:

: $ sudo pkg_add -u
: Use of uninitialized value $file in hash element at 
/usr/libdata/perl5/OpenBSD/Temp.pm line 80.
: Use of uninitialized value $error in concatenation (.) or string at 
/usr/libdata/perl5/OpenBSD/PackageRepository.pm line 723.
: sh: syntax error: unexpected EOF
: Use of uninitialized value $filename in open at 
/usr/libdata/perl5/OpenBSD/PackageRepository.pm line 649.
: http://ftp5.eu.openbsd.org/ftp/pub/OpenBSD/snapshots/packages/amd64/ is empty

followed by a list of installed packages that failed to update.

-- 
Dmitrij D. Czarkoff

Re: hardware support

[Dmitrij D. Czarkoff]

Joseph Oficre said:
 Hello, my friends.
 Can someone tell me, is this hardware will work with OpenBSD 5.6
[...]
 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX
 650] (rev a1)

AFAIK in vesa mode only.  No hardware acceleration.

 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev
 a1)

This won't.


 Interested of Nvidia videocard, I dont need some super 3d support, just
 1920x1200 resolution.

I guess you will be able to set up this resolution using gtf(1), but
with no 2D acceleration that will be painful.  You may try running it
with vesa driver in Linux (eg. by removing nouveau or nvidia proprietary
driver, whichever you use) and see.


If the system is now under your control, you could either buy a CD or
download an image from any mirror and boot your system.  If your disk is
in MBR format (not in GPT), you may even free a bit of space and install
OpenBSD there.  Or back up your system and do a full install.  Another
option would be to install OpenBSD to a flash drive, and boot from
there; it would be painfully slow, but will give you a simple way of
testing hardware compatibility.

-- 
Dmitrij D. Czarkoff

Re: hardware support

[Dmitrij D. Czarkoff]

Joseph Oficre said:
 PS: i've made live USB, booted, but first FAST check didnt give me any
 results, just segfault on xorg -configure, need more time for it :c

You have to write xorg.conf yourself.  IIRC a Monitor section and
modeline from gtf(1) would suffice.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD firefox useragent Facebook

[Dmitrij D. Czarkoff]

Nick Holland said:
 I'm not losing any sleep over it, however.  I seem to have low
 expectations for people coding not-stupidly.

It is actually normal these days for web developers to support only a
handful of most used configurations.  It is funny that they still argue
that HTML5 is *the* cross-platform API for application development.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD Tablet-ish

[Dmitrij D. Czarkoff]

Adam Thompson said:
 Unless you've found handwriting recognition or on-screen-keyboards that work
 well with OpenBSD, you'll probably still have to carry around a USB
 keyboard, which might make the whole exercise pointless.  Good luck, anyway.

Recently I had my hands on ExoPC - an amd64-based tablet with only
touchscreen and single sensor button as its inputs.  It was quite usable
with OpenBSD, but only with Gnome - non-Gnome GUI software relies too
heavily on right mouse button.  Although I had wireless keyboard
connected nearly all the time, virtual keyboard was sufficient in most
cases.

P.S.:  From my previous experience with ASUS R2Hv and preinstalled Vista
I concluded that handwriting recognition is very inefficient.

-- 
Dmitrij D. Czarkoff

Re: CPU criteria for OpenBSD firewall

[Dmitrij D. Czarkoff]

Stuart Henderson said:
 Half of that page is obsolete. 
[...]
 Various things are recommended without explaining that they are a 
 trade-off or can cause problems. There are
 It includes tweaks which may improve performance of an end host (but
 have trade-offs) in a page mostly talking about routers, other
 tweaks which are nothing to do with networking and in some cases
 dangerous.

It would be nice if someone with expertise could write a detailed
explanation of the issues with that article...

-- 
Dmitrij D. Czarkoff

Re: openbsd x2goclient

[Dmitrij D. Czarkoff]

Joseph Oficre said:
 I'm using release system + stable ports.
 Hmm, so u recommend me to use current? I can try it..

I don't promise that it will work (I don't even know what exactly the
software in question is), but I may assure you that ports for -current
may fail with -stable, and ports that are too current to be in -current
more so.  Actually, some of ports from openbsd-wip are not submitted
because they still wait some changes in base or ports.

-- 
Dmitrij D. Czarkoff

Re: openbsd x2goclient

[Dmitrij D. Czarkoff]

Joseph Oficre said:
 ) at /usr/src/lib/librthread/rthread.c:145

FWIW what version of OpenBSD are you using?  If the answer is not
exactly recent snapshot, you should probably try it there, as all of
the openbsd-wip ports tree development happens on -current.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD usb cannot be read on Windows

[Dmitrij D. Czarkoff]

Priit Kivisoo said:
  Windows reads only 240 M.
  How can I recover the 16G on the USB?
 
 Reformat it.

You will likely need to get rid of mbr partition to reclaim the space.
You can do it with fdisk, dd (dd if=/dev/zero of=/dev/sdNc bs=512 count=1)
or with Windows' Disk Management tool (You can find it in Computer
Management shell).

-- 
Dmitrij D. Czarkoff

Re: OpenBSD firefox useragent Facebook

[Dmitrij D. Czarkoff]

Erling Westenvik said:
 My Windows computers does not have this problem, neither does my laptop
 when it's connected through various gateways.

And what about user-agent from your desktop and laptop?  Do they work?

-- 
Dmitrij D. Czarkoff

Re: Openbsd broke my hard drive twice! Getting frustrated

[Dmitrij D. Czarkoff]

Daniel Dickman said:
 The firmware on my laptop reads all the partitions in the MBR except
 ones marked as type EE (EFI). It then seems to try to read into those
 partitions for something else. If there is even 1 OpenBSD partition,
 it chokes on something in it. No idea why the firmware is reading past
 the MBR and into the actual disk partitions, seems strange.

Firmware may be trying to verify integrity of ntldr just like UEFI
firmware would.  Makes sense as security feature in PR department's
view.

-- 
Dmitrij D. Czarkoff

Re: Former Yugoslavia in countrycodes

[Dmitrij D. Czarkoff]

Zeljko Jovanovic said:
 I thought at least OpenBSD people had some understanding of how world
 politics work.

This is wrong forum for world politics discussions.  Let's not
digress.

-- 
Dmitrij D. Czarkoff

Re: Former Yugoslavia in countrycodes

[Dmitrij D. Czarkoff]

Peter Hessler said:
 On 2015 Jan 04 (Sun) at 21:39:08 -0500 (-0500), Predrag Punosevac wrote:
 For many of us who were born in that country and whose lives have been
 altered forever by actual events on the ground your remark doesn't sound
 clever
 
 I'm sorry, but this is simply a fact.  To get a country code assigned,
 you will need to contact the ISO.  We are unable to assign one for them.

I guess it is not the lack of country code for Kosovo he is upset with.

-- 
Dmitrij D. Czarkoff

Re: Former Yugoslavia in countrycodes

[Dmitrij D. Czarkoff]

Jan Stary said:
 -MK:MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF
 +MK:MACEDONIA

AFAIK the former variant is currently the correct one. There is a
dispute between Macedonia and Greece regarding the meaning of the word
Macedonia - Greece maintains that this word refers to its region (as
in Alexander III of Macedon).

-- 
Dmitrij D. Czarkoff

Re: Adding a new keymap

[Dmitrij D. Czarkoff]

Henrique Lengler said:
 I would like to install a custom keymap on my system

Are you talking about X11 or console keymap?  The former is defined in
/usr/X11R6/share/X11/xkb/symbols/, the latter – in
/usr/src/sys/dev/pckbc/wskbdmap_mfii.c.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD Trademark Policy

[Dmitrij D. Czarkoff]

Riley Baird said:
 As for why I want to create the distro, I think that OpenBSD has
 excellent security, and I would like to create a version without the
 binary-only microcode included.

Isn't it easier to just do

 # cd /mnt/etc; tar czf firmware{.tgz,}; rm -R firmware

from bsd.rd after installer exits?

-- 
Dmitrij D. Czarkoff

Re: OpenBSD Trademark Policy

[Dmitrij D. Czarkoff]

Riley Baird said:
 However, remember that if someone doesn't know much about OpenBSD, they
 will either: a) think that OpenBSD does not contain binary-only firmware
 due to the Blob-Busters marketing or b) not know where to look to
 remove it should they wish to

This information is easily available to anyone interested via online
manual pages for affected drivers.  If user is not knowledgable enough
to verify whether his hardware can be used without proprietary firmware,
you are doing misservice.

P.S.: how are you going to cope with hardware that already contains
firmware and does not require loading it at initialization time?  Or is
this kind of firmware OK according to your definition of free?

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Anthony J. Bentley said:
  I haven't used Apple OSses since around 10.4, but Mac OS X was doing a
  thing where certain well-known directory names were aliased according to
  the current locale. For instance, the user's  music directory was shown
  as 「音楽」 when the locale was set to ja_JP.UTF-8.
 
 IMO this is totally crazy behavior and unrelated to the Unicode issue.

GNOME does this too.  It goes even further - proposes to rename XDG
directories if locale changes.  Most amusingly, if you happen run GNOME
and Firefox with English locale and then switch to non-English locale,
your GNOME will rename XDG directories to new locale defaults, and
Firefox will re-create ~/Desktop.  I rarely have to deal with systems
with non-English locales, but each and every time I have to, I get
terrified with the changes since the last time.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

First of all, I really don't believe that preservation of non-canonical
form should be a consideration for any software.  There is no single
reason to allow non-canonical forms to exist at all, while there are
several reasons to avoid them.  More so for foreign encodings in
filenames - if you are trying to store UTF-16 names on a system with
UTF-8 locale, you should be converting, not escaping.  Doing otherwise
is just asking for troubles.

Next, I assume that ability to enter filenames trumps ability to
preserve original filename on Unix-like systems.  In most cases right
now these two values don't clash, because user input is normalized from
the very beginning in IME.  That said, there may be exceptions.  Eg.
several mail clients won't normalize filename if input encoding matches
encoding of attachement.  Thus, having recieved a file with non-ASCII
filename from Mac, you'll end up being unable to address it from shell
even if it was typed using exactly the same keyboard layout you use.  I
don't see how this situation may be justified.  The rare cases when
original filenames must be preserved byte to byte warrant some special
handling (eg. storing filenames elsewhere separately or preserving the
whole files with names and attributes in some archive or other form of
special database).

Finally, provided that both ends of network communication use canonical
forms for Unicode, the matter of storing file remotely and then
recieving it back with filename intact is simply a matter of
normalization on reciever's side.  That is: if you prefer your local
files in NFD, and your NAS uses NFC, you should simply normalize
filenames when you recieve files back.  The only potential problem here
is compatibility normalizations, but these are already problematic
enough to be avoided in all cases where NFD or NFC do the job.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Joel Rees said:
 Maybe it would be better just to not make those directories until they
 are needed by an application, and then ask the user to name them
 instead of providing standard names.

Actually, it is still workable if you carry your ~/.config/user-dirs.dir
around, so that you could install it before you first log into GNOME.  I
used this approach to sanitize structure of my home directory when I
needed a working GNOME desktop.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

pizdel...@gmail.com said:
 How do you 'enforce' NFD?
 
 Let the kernel normalize (ie /destructively/ transform) the file names
 behind user's back, so that a file will be listed with a different name
 than that with which it was created? That's very nice and secure, indeed.

I would enforce normalization at filename access time (open(), fopen(),
readdir(), etc).  Yes, destructively transform.  I would reject
filenames that won't decode.  If this is documented, I just don't see
how it is behind user's back, and it at least partially solves the
problem of accessing right files.

FWIW I've stopped using Unicode filenames after I found that I can't
type in the name of file that contains only the glyphs that I can type
in, just because at that time I used keyboard layout with combining
diacritical marks instead of dead keys, so my input was NFD, while
name of the file I got from somewhere was NFC.

 And btw, normalization won't do much about 'homographs':
 
 $ echo  ∕еtс∕раsswd
 $ rm ∕еtс∕раsswd
 $

This is a separate problem.  My suggestion does not help here, which
does not render it useless for other cases.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Stefan Sperling said:
 Bad idea. See my other post. Apple did this and broke existing applications.

OpenBSD changed time_t and broke existing applications, but hardly
anyone thinks it was a bad idea.  Fancy filenames are long known to be
problematic, so filename policy enforcement is a breakage of the same
sort.  Apple have taken the lead here, and they may eventually do the
same thing to industry as OpenBSD did by changing time_t.

FWIW now it is rather safe to normalize filenames now, as related
problems are already being solved due to breakages on OSX.

Although I might be missing something, an additional function which
takes desired filename and outputs normalized filename could probably
solve this problem on applications' side.  Such function, be it
implemented in libc, could even allow system administrators enforce
local file naming preference as system-wide policy.

P.S.:  I don't actually propose to implement filename normalization in
OpenBSD right now.  I've merely thrown this idea to generate potentially
fruitful discussion.  Don't mistake it for feature request or demand of
some kind.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Janne Johansson said:
 There is quite a bit of difference between changing the storage format and
 making some dates impossible that previously did work.

Don't think so.  Something got changed, things got broken and need to be
fixed.  The only real question is: is the change worth the trouble.  I
think it is, although unanimous negative reaction hints that I am
probably missing something important.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Joel Rees said:
 Hmm. What would you suggest doing with the following file name?
 
 ／ｅｔｃ
 
 (You may need a Japanese font to display it.)
 
 If you try to normalize it on a *nix box, it will hopefully conflict
 with your system file permissions. But, then what do you do with it?
 
 If you throw it away because it's non-normal, and it happens to have
 the parts of the new marketing plan that didn't fit under some other
 category, will the boss be okay with that?

I am not sure I get you.  I proposed using NFD for filenames.  In system
implementing that the filename you provide as example above would be
stored as is, as it is already NFD and can't be further decomposed.  I
never suggested NFKD as your message implies.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Joel Rees said:
 Now, what would you do with this?
 
 ジョエル
 
 Why not decompose it to the following?
 
 ｼﾞｮｴﾙ

Because it is not what Unicode normalization is.

 I know what the Unicode rules say, but my boss says, if I'm going to
 play with file names, he wants it done his way.

And now you suggest that idea of enforcing local filename policy is bad
idea because local filename policy might not be sane.  Ok.

First, let's decouple NFD suggestion from local policy.  Again, no
problems with NFD here.  I don't really see any sense in local policy
that demands this conversion, but if your boss needs it, it is not my
business.  I can't get why mention it though: it is completely unrelated
problem.

 You have to keep rules about making file names for internal use
 separate from rules about storing filenames received, or the internal
 system loses its meaning.

And now you speak of normalization or of local policy?  At any rate, any
incoming file has a name, which is encoded somehow.  It may be encoded
in utf-16le, for example.  Now, either you store a filename that you
can't read without using iconv or another tool of a kind, or you convert
the name to your locale.  If your locale happens to use utf-8, you still
have to convert byte sequence to another byte sequence.  The conversion
I proposed would convert destructively, but maintaining Unicode
equivalence, so aside from subtle technical (choice of canonical form)
the set of glyphs that makes the filename would remain exactly the same.
This is not even a policy, just consistent representation.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Joel Rees said:
 That said, the standard provides just enough facilities to make
 filesystem-related aspects of Unicode work nicely, particularily in case
 of utf-8.  Eg. ability to enforce NFD for all operations on file names
 could actually make several things more secure by preventing homograph
 attacks.
 
 I think this assertion is a bit optimistic, and not just given your
 following caveat.

Provided that I have to cope with Unicode file names every day, I just
can't see more pessimistic approach then just allowing arbitrary Unicode
codepoints with no sanitization whatsoever.  Every now and then I have
to use printf(1) and xclip(1x) just because there is no other way to
address a file or identify all codepoints of its name.  From here I
don't see ability to enforce policy on Unicode strings as something as
useless as you put it.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Thomas Bohl said:
 # ls | cat
 Will display the characters right.
 Not entirely sure why though.

From ls(1) manual:

| -q  Force printing of non-graphic characters in file names as the
| character `?'; this is the default when output is to a terminal.


-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

frantisek holop said:
 is it true to say then, that ffs is entirely utf8 safe,
 and/or that ffs is actually an utf-8 encoded filesystem
 as IIRC Mac OS is?  or is it some kind of happy accident
 that it works? :)

As I get it, ffs is entirely utf8 safe because it is not encoding
aware.  With whatever locale commands

  $ touch `printf \aabb\bc`

and

  $ touch `printf \201\202\203`

succeed.  (Interestingly, ls | cat in presence of filename with ASCII
bell does not actually ring the bell, although backspace works as
expected.)  These octet arrays may happen to be valid utf-8 as well.

-- 
Dmitrij D. Czarkoff

Re: ffs and utf8

[Dmitrij D. Czarkoff]

Ingo Schwarze said:
 While the article is old, the essence of what Schneier said here
 still stands, and it is not likely to fall in the future:
 
   https://www.schneier.com/crypto-gram-0007.html#9

Sorry, but this article is mostly based on lack of understanding of
Unicode.

 that would directly run contrary to some of OpenBSD's most important
 project goals:  Correctness, simplicity, security.

Yes, Unicode is very complex.  Just complex enough that there is (to my
knowledge) no single application that does it right in every aspect.

That said, the standard provides just enough facilities to make
filesystem-related aspects of Unicode work nicely, particularily in case
of utf-8.  Eg. ability to enforce NFD for all operations on file names
could actually make several things more secure by preventing homograph
attacks.

Unfortunately, there is no realistic hope that NFD will be enforced by
every OS and filesystem out there any time soon, so at this stage file
names with bytes outside printable ASCII range will cause problems at
some point.  On my systems I limit filenames to [0-9A-Za-z~._/-] range.

-- 
Dmitrij D. Czarkoff

Re: surf (browser): URL bar doesn't appear

[Dmitrij D. Czarkoff]

Alessandro DE LAURENZIS said:
 It's just me? Any hints? Any point in the right direction for a proper
 debug more than welcome.

http://marc.info/?l=openbsd-portsm=141321944629586w=2

-- 
Dmitrij D. Czarkoff

Re: Mac Mini

[Dmitrij D. Czarkoff]

Austin Gilbert said:
 Is there anything I can do at the “boot” prompt to try
 disabling/enabling different device drivers for the USB ports so the
 keyboard will work under BSD.rd? 

Your best bet would probably be to install OpenBSD in unattended mode[1]
and get dmesg via ssh.  That said, you may try disabling controllers via
UKC(8)[2], but I am not sure whether it is available in bsd.rd.

-- 
Dmitrij D. Czarkoff

[1] http://undeadly.org/cgi?action=articlesid=20140106055302
[2] http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/UKC.8

Re: uvideo(4) problems in recent snaps?

[Dmitrij D. Czarkoff]

percy piper said:
 Has anyone noticed problems with uvideo(4) in recent snapshots?
 
 The issue I'm seeing is reproducible with video(1) - just run it and
 wait. After some seconds or minutes no new frames arrive and video(1)
 is waiting on poll(2). Larger frame sizes seem to decrease the time
 needed to achieve this state. No errors are logged at all.

I can't confirm this on November 10 snapshot.

$ uname -rv
5.6 GENERIC.MP#546
$ usbdevs -dv
Controller /dev/usb0:
addr 1: high speed, self powered, config 1, EHCI root hub(0x), ATI(0x1002), 
rev 1.00
  uhub0
 port 1 powered
 port 2 enabled
 port 3 powered
 port 4 powered
 port 5 disabled
Controller /dev/usb1:
addr 1: high speed, self powered, config 1, EHCI root hub(0x), ATI(0x1002), 
rev 1.00
  uhub1
 port 1 disabled
 port 2 enabled
 port 3 powered
 port 4 disabled
 port 5 addr 2: high speed, power 200 mA, config 1, Integrated Camera(0x03b4), 
Ricoh Company Ltd.(0x5986), rev 20.13
   uvideo0
Controller /dev/usb2:
addr 1: full speed, self powered, config 1, OHCI root hub(0x), ATI(0x1002), 
rev 1.00
  uhub2
 port 1 disabled
 port 2 enabled
 port 3 enabled
 port 4 addr 2: full speed, self powered, config 1, Broadcom Bluetooth 
Device(0x217f), Broadcom Corp(0x0a5c), rev 7.48, iSerialNumber 60D819BEBD2A
   ugen0
 port 5 enabled
Controller /dev/usb3:
addr 1: full speed, self powered, config 1, OHCI root hub(0x), ATI(0x1002), 
rev 1.00
  uhub3
 port 1 disabled
 port 2 enabled
 port 3 enabled
 port 4 enabled
 port 5 powered

-- 
Dmitrij D. Czarkoff

Re: 5.6 arrived

[Dmitrij D. Czarkoff]

Theo de Raadt said:
 Oh, you want us to call the snapshots 57, instead?
 
 How will that enligthen people?

FWIW naming snapshots after release they lead to is more helpful then
naming them after previous release that does not include some of their
code.

-- 
Dmitrij D. Czarkoff

Re: 5.6 arrived

[Dmitrij D. Czarkoff]

trondd said:
 And as Theo brought up, numbering them 57 snapshots doesn't fix anything.
 It just changes the confusion.  Instead of you asking if the 56 snapshot
 was close to the 56 release version, we'd have someone asking if the 57
 snapshot they see is close to the 57 release that won't be cut for another
 4 months.  The answer to both is no, probably not.

Yes, neither snapshot versioning scheme helps understanding whether the
snapshot is close to release with same version; thus neither schemes
helps with this particular question.  But the scheme where snapshots are
numbered after next release branch is helpful when the question Which
release will include the changes that were introduced in this snapshot?

That does not work for the changes that happened after last snapshot
before branching the release though.

So far numbering snapshots after next release branch makes more sense to
me.  That said, making sense to project members is much more important
anyway.

-- 
Dmitrij D. Czarkoff

Re: mutt and gmail

[Dmitrij D. Czarkoff]

frantisek holop said:
 i'd like to ask other gmail on mutt users if they
 experience a Mailbox closed issue if they have
 it open for longer stretches of time. reopening
 the mailbox works but it is kind of a PITA.
 
 after making a debug enabled mutt, its debug
 log reveals the following:

FWIW I use mbsync (from mail/isync) to sync Gmail to local maildir, and
have my mutt set up to work in maildir only.  I set up cron to call
mbsync on schedule, and I from then I totally forgot about the
crappiness of Gmail's IMAP interface.

-- 
Dmitrij D. Czarkoff

Re: move to git?

[Dmitrij D. Czarkoff]

Peter Hessler said:
 A) yes, google does say about this.

FWIW Google is not really relevant here.  Mailing Lists[1] page of
OpenBSD lists several searchable archives of project's mailing lists.
Simple Gmane search for git switch[2] brings two relevant discussions
on the very first page of search results.  (I didn't bother checking
other archives as gmane is the one I prefer.)

[1] http://www.openbsd.org/mail.html
[2] 
http://search.gmane.org/?query=git+switchauthor=group=gmane.os.openbsd.misc

-- 
Dmitrij D. Czarkoff

Re: Why are there no PKG_PATH defaults?

[Dmitrij D. Czarkoff]

openda...@hushmail.com said:
 Then, in the event that someone installed via an ISO or some
 pre-defined VM (ie. a DigitalOcean droplets) -- how about a one-time
 script upon first root login to ask for such info?

   You do not have a `PKG_PATH` set for `pkg_add`. Would you like us to
 set it for you?  (Y/n) y

  Choose your nearest mirror:

  1. Continent
  2. Whatever
  3. ...

FWIW the idea of presenting the list of mirrors suddenly starts to make
sense, as now there is no browser in base install. But

Alexander Hall said:
 I can't speak for others, but I'd be terribly annoyed by this.

I absolutely agree with this sentiment.

In my opinion, the best way to present list of mirrors would be to
provide a command for fetching it, either in pkg_add(1) or in root.mail
(the message root recieves upon completion of installation).  As I
prefer the latter way, patch to root.mail follows.

-- 
Dmitrij D. Czarkoff

Index: root.mail
===
RCS file: /var/cvs/src/etc/root/root.mail,v
retrieving revision 1.104
diff -u -p -r1.104 root.mail
--- root.mail   15 Jul 2014 22:05:29 -  1.104
+++ root.mail   24 Sep 2014 22:05:12 -
@@ -36,7 +36,9 @@ full list of packages for each architect
ftp://ftp.openbsd.org/pub/OpenBSD/5.6/packages/
 
 If you do not find a package you want on the CD, please go look at your
-nearest FTP mirror site.
+nearest FTP mirror site.  To get a list of available mirrors, execute:
+
+ ftp -o - http://ftp.openbsd.org/cgi-bin/ftplist.cgi
 
 Select your architecture and download the tarballs of your choice.  For example
 to install the emacs package for amd64, execute:

Re: dwb questions

[Dmitrij D. Czarkoff]

Zoran Kolic said:
 I changed options in settings file. It disabled scripts
 and cookies. I played a little with commands above and
 went nowhere. Obviously have to use the browser a bit to
 get a feeling.

You might want to file a bug at upstream's tracker: whitelisting is one
of the selling points of dwb, and if documentation doesn't make its
usage clear, it's a bug.

-- 
Dmitrij D. Czarkoff

Re: dwb questions

[Dmitrij D. Czarkoff]

Zoran Kolic said:
 at-spi-bus-launc
 at-spi2-registry
 
 Somebody knows what they are?

These relate to at-spi.[0]  I believe webkit starts these.

 Also, if anyone could point me to the info about adding
 noscript/flashblock extension, it would be even better.

From dwb FAQ[1]:

| Is adblocking supported in dwb?
|
| dwb supports most adblock+ filterrules. A adblock subscription script
| is also available, to install it run
|
|   dwbem -i adblock_subscriptions
|
| Subscriptions can then be added with
|
|   adblock_subscribe
|
| and removed with
|
| adblock_unsubscribe

 I am aware that it must be possible to disable js and
 to block cookies, but cannot find the way.

You can use cc, cs, ct shortcuts to whitelist domains for enabling
cookies.  Shortcuts tsh, tsu, tth and ttu whitelist domains for
javascript.  See dwb(1) manual for details.

[0] https://wiki.linuxfoundation.org/en/AT-SPI_on_D-Bus
[1] http://portix.bitbucket.org/dwb/#faq

-- 
Dmitrij D. Czarkoff

Re: new OpenSSL flaws

[Dmitrij D. Czarkoff]

Eric Furman said:
 Given the current circumstances Libre.SSL WILL prevail.

I hope you are right, but I actually believe that the circumstances of
this thread may work against LibreSSL - most likely the time difference
between vulnerability disclosure and patches for LibreSSL would be
percieved as security risk.

-- 
Dmitrij D. Czarkoff

Re: taking a screenshot through cwm shortcut.

[Dmitrij D. Czarkoff]

marst said:
 bind 4-p /home/marst/bin/screenshot.sh

Why do you need shellscript for one-liner?

 scrot -s '%Y-%m-%d_$wx$h.png' # -e 'mv $f ~/documents/shots' -e 'feh $f'

If you uncomment the rest of the command, it won't do what you wanted it
to do. Use something like this instead:

 bind 4-p scrot -s 'documents/shots/%Y-%m-%d_$wx$h.png' -e 'feh $f'

You may inspect '~/.xsession-errors' for cwm/scrot output.

 But when I hit the shortcut key from cwm, nothing seem to happen.
 Can such a command be executed in cwm?  What am I doing wrong?

Are you sure you've reloaded cwm after changing its configuration?

-- 
Dmitrij D. Czarkoff

Re: Building libav/ffmpeg x264 on 5.4

[Dmitrij D. Czarkoff]

Michael Lackner said:
 Hello,
 
 And that's why I cannot use ffmpeg directly. Part of what I am doing is 
 bringing a certain
 x264 benchmark onto a wide variety of systems, and to do that properly, I 
 would need to
 use the exact same options for comparisons sake. After managing, proper 
 documentation is
 being provided online.

You may simply copy ffmpeg and x264 ports to mystuff directory inside
your ports dir and make the changes you need to these local ports.
That would allow you to reuse ports build infrastructure (which does
many things easier) while having your customization.

-- 
Dmitrij D. Czarkoff

Re: In OpenBSD how to upgrade individual system files like (grep, rcs, rlog ) to latest version?

[Dmitrij D. Czarkoff]

jignesh desai said:
 Hi Fred,
 ?
 No I have modifided config and Unchrooted? it.
 ?
 After which i am
 successfully able to run? http://localhost/foswiki/bin/configure page. 
 and
 its this page that reports error about wrong file versions. 
 ?
 therefore i
 wish to update those files to latest versions.? The Files are :? grep, rcs,
 ci, co ,rlog, rcsdiff.
 ?
 Infact I copied grep file from another folder into
 foswiki folder, after which it reported that grep is not a GNU grep,
 from
 the message i believe its looking for specific version of grep.
 ?
 Any further
 advice ?
 ?

 1. Use chrooted httpd. Really.
 2. Either patch foswiki to use proper tools or install GNU stuff it
wants. Apparently you need ggrep package. Copy everything you need
to the chroot.

-- 
Dmitrij D. Czarkoff

Re: In OpenBSD how to upgrade individual system files like (grep, rcs, rlog ) to latest version?

[Dmitrij D. Czarkoff]

jignesh desai said:
 Any advice what to type in Pkg_add .. ???   command to install GNU stuff ?

Here is the best advice on the topic:

 man pkg_add

If you want to get anywhere, you *must* read manuals.  You may
accidentally install and run foswiki (or whatever else) without getting
familiar with documentation, but that will only lead to unexpected
problems and actual reading of documentation when you don't have time
for it.  Nobody would be there handholding you.  Prepare now.

P.S.: Another advice - pkg_add, not Pkg_add.

-- 
Dmitrij D. Czarkoff

unlink utility

[Dmitrij D. Czarkoff]

Hello!

For some reason POSIX X/Open Systems Interfaces option requires 'unlink'
utility to be present in operating system.  Sure, it does nothing that
'rm' doesn't already do, but given that 'unlink' is already used in some
scripts, I wonder if it would be benefitial for OpenBSD to include such
utility.

FWIW a simple implementation follows.



unlink.c

/*
 * Copyright (c) 2014 Dmitrij D. Czarkoff czark...@gmail.com
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED AS IS AND THE AUTHORS DISCLAIM ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include errno.h
#include locale.h
#include stdio.h
#include stdlib.h
#include unistd.h

extern char *__progname;

void  usage(void);

int
main(int argc, char **argv)
{
setlocale(LC_ALL, );

  if (argc != 2) {
usage();
  } else if (unlink(*(argv+1))) {
perror(unlink);
return errno;
  }

  return 0;
}


void
usage(void)
{
(void)fprintf(stderr, usage: %s file\n, __progname);
exit(1);
}



unlink.1

.\
.\ Copyright (c) 2014 Dmitrij D. Czarkoff czark...@gmail.com
.\
.\ Permission to use, copy, modify, and distribute this software for any
.\ purpose with or without fee is hereby granted, provided that the above
.\ copyright notice and this permission notice appear in all copies.
.\
.\ THE SOFTWARE IS PROVIDED AS IS AND THE AUTHOR DISCLAIMS ALL WARRANTIES
.\ WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
.\ MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
.\ ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
.\ WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
.\ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\ OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\
.Dd $Mdocdate: March 26 2014 $
.Dt UNLINK 1
.Os
.Sh NAME
.Nm unlink
.Nd call the
.Xr unlink 2
function
.Sh SYNOPSIS
.Nm unlink
.Ar file
.Sh DESCRIPTION
The
.Nm
utility calls
.Xr unlink 2
function to remove a
.Ar file
specified on the command line.
.Pp
A user may need appropriate privileges to invoke the
.Nm
utility.
.Sh EXIT STATUS
.Ex -std unlink
.Sh SEE ALSO
.Xr link 1,
.Xr rm 1 ,
.Xr unlink 2
.Sh STANDARDS
The
.Nm
utility is compliant with the
.St -p1003.1-2008
specification.
.Sh HISTORY
The
.Nm
utility first appeared in
.Ox 5.6 .


-- 
Dmitrij D. Czarkoff

Re: unlink utility

[Dmitrij D. Czarkoff]

Gilles Chehade said:
 without commenting on the need for the utility itself, the code you have
 provided does not respect the coding style of OpenBSD, and your main
 function shouldn't be returning errno

Sorry, I was not paying enough attention to style.

What about this one:


 unlink.c

/*
 * Copyright (c) 2014 Dmitrij D. Czarkoff czark...@gmail.com
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED AS IS AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include errno.h
#include locale.h
#include stdio.h
#include stdlib.h
#include unistd.h

extern char *__progname;

static void usage(void);

int
main(int argc, char **argv)
{
setlocale(LC_ALL, );

if (argc != 2)
usage();
else if (unlink(*(argv + 1))) {
perror(__progname);
return (1);
}
return (0);
}

static void
usage(void)
{
(void)fprintf(stderr, usage: %s file\n, __progname);
exit(1);
}


-- 
Dmitrij D. Czarkoff

Re: Update: devel/py-hg-git

[Dmitrij D. Czarkoff]

Stuart Henderson said:
 please use the DISTFILES= ${DISTNAME}{origfilename}${EXTRACT_SUFX} method,
 see e.g. devel/ninja or multimedia/livestreamer-curses

Sorry, absolutely forgot about this.


Index: py-hg-git/Makefile
===
RCS file: /var/cvs/ports/devel/py-hg-git/Makefile,v
retrieving revision 1.13
diff -u -p -r1.13 Makefile
--- py-hg-git/Makefile  3 Oct 2013 16:37:16 -   1.13
+++ py-hg-git/Makefile  9 Mar 2014 13:49:36 -
@@ -2,7 +2,7 @@
 
 COMMENT =  push/pull from a Git server repository using Mercurial
 
-MODPY_EGG_VERSION =0.3.4
+MODPY_EGG_VERSION =0.5.0
 DISTNAME = py-hg-git-${MODPY_EGG_VERSION}
 REVISION = 0
 
@@ -13,19 +13,20 @@ HOMEPAGE =  http://hg-git.github.com/
 # GPLv2
 PERMIT_PACKAGE_CDROM = Yes
 
-# Ugly gymnastics to give a more sensible filename than 0.3.4.tar.gz..
-MASTER_SITES = 
https://bitbucket.org/durin42/hg-git/get/${MODPY_EGG_VERSION}${EXTRACT_SUFX}?dummy=/
+MASTER_SITES = https://bitbucket.org/durin42/hg-git/get/
+DISTFILES =${DISTNAME}{${MODPY_EGG_VERSION}}${EXTRACT_SUFX}
 
 MODULES =  lang/python
 MODPY_SETUPTOOLS = Yes
 
-WRKDIST =  ${WRKDIR}/durin42-hg-git-586b7aa96466
+WRKDIST =  ${WRKDIR}/durin42-hg-git-ef41e87ea11a
 
 RUN_DEPENDS =  devel/py-dulwich \
devel/mercurial
-TEST_DEPENDS = ${RUN_DEPENDS} \
+TEST_DEPENDS = ${RUN_DEPENDS} \
archivers/bzip2 \
archivers/unzip \
+   devel/py-nose \
devel/git,-main
 
 pre-test:
@@ -34,6 +35,6 @@ pre-test:
 
 do-test:
cd ${WRKSRC}/tests  ${MODPY_BIN} run-tests.py \
-   --with-hg=${LOCALBASE}/hg
+   --with-hg=${LOCALBASE}/bin/hg
 
 .include bsd.port.mk
Index: py-hg-git/distinfo
===
RCS file: /var/cvs/ports/devel/py-hg-git/distinfo,v
retrieving revision 1.4
diff -u -p -r1.4 distinfo
--- py-hg-git/distinfo  4 Jan 2013 01:30:47 -   1.4
+++ py-hg-git/distinfo  26 Feb 2014 13:39:04 -
@@ -1,2 +1,2 @@
-SHA256 (py-hg-git-0.3.4.tar.gz) = FJFOG0RNwrbxxWOLWq9wNCGDhpx/K9d6MJZ9EFhEr20=
-SIZE (py-hg-git-0.3.4.tar.gz) = 51141
+SHA256 (py-hg-git-0.5.0.tar.gz) = 6ztcYyesAFDeAYSg4tqboavfeuTrgBDDiJArQPpJMBk=
+SIZE (py-hg-git-0.5.0.tar.gz) = 72786
Index: py-hg-git/pkg/PLIST
===
RCS file: /var/cvs/ports/devel/py-hg-git/pkg/PLIST,v
retrieving revision 1.3
diff -u -p -r1.3 PLIST
--- py-hg-git/pkg/PLIST 4 Jan 2013 01:30:47 -   1.3
+++ py-hg-git/pkg/PLIST 26 Feb 2014 14:24:15 -
@@ -12,10 +12,14 @@ lib/python${MODPY_VERSION}/site-packages
 lib/python${MODPY_VERSION}/site-packages/hggit/_ssh.pyc
 lib/python${MODPY_VERSION}/site-packages/hggit/git_handler.py
 lib/python${MODPY_VERSION}/site-packages/hggit/git_handler.pyc
+lib/python${MODPY_VERSION}/site-packages/hggit/gitdirstate.py
+lib/python${MODPY_VERSION}/site-packages/hggit/gitdirstate.pyc
 lib/python${MODPY_VERSION}/site-packages/hggit/gitrepo.py
 lib/python${MODPY_VERSION}/site-packages/hggit/gitrepo.pyc
 lib/python${MODPY_VERSION}/site-packages/hggit/help/
 lib/python${MODPY_VERSION}/site-packages/hggit/help/git.rst
+lib/python${MODPY_VERSION}/site-packages/hggit/hg2git.py
+lib/python${MODPY_VERSION}/site-packages/hggit/hg2git.pyc
 lib/python${MODPY_VERSION}/site-packages/hggit/hgrepo.py
 lib/python${MODPY_VERSION}/site-packages/hggit/hgrepo.pyc
 lib/python${MODPY_VERSION}/site-packages/hggit/overlay.py


-- 
Dmitrij D. Czarkoff

Linux partition appears as ext2 partition in disklabel

[Dmitrij D. Czarkoff]

acpimcfg0 at acpi0 addr 0xf800, bus 0-31
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PB4_)
acpiprt2 at acpi0: bus 1 (PB5_)
acpiprt3 at acpi0: bus 2 (PB6_)
acpiprt4 at acpi0: bus 3 (PB7_)
acpiprt5 at acpi0: bus 4 (P2P_)
acpiprt6 at acpi0: bus -1 (SPB0)
acpiprt7 at acpi0: bus -1 (SPB1)
acpiprt8 at acpi0: bus -1 (SPB2)
acpiprt9 at acpi0: bus -1 (SPB3)
acpiec0 at acpi0
acpicpu0 at acpi0: C2, PSS
acpicpu1 at acpi0: C2, PSS
acpitz0 at acpi0: critical temperature is 100 degC
acpibtn0 at acpi0: PWRB
acpithinkpad0 at acpi0
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT1 model 42T4947 serial   423 type LION oem SANYO
acpibtn1 at acpi0: LID_
cpu0: 1647 MHz: speeds: 1650 1320 825 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 AMD AMD64 14h Host rev 0x00
radeondrm0 at pci0 dev 1 function 0 ATI Radeon HD 6320 rev 0x00
drm0 at radeondrm0
radeondrm0: msi
azalia0 at pci0 dev 1 function 1 ATI Radeon HD 6310 HD Audio rev 0x00: msi
azalia0: no supported codecs
ppb0 at pci0 dev 5 function 0 AMD AMD64 14h PCIE rev 0x00: msi
pci1 at ppb0 bus 1
Realtek 8188CE rev 0x01 at pci1 dev 0 function 0 not configured
ppb1 at pci0 dev 6 function 0 AMD AMD64 14h PCIE rev 0x00: msi
pci2 at ppb1 bus 2
alc0 at pci2 dev 0 function 0 Attansic Technology L1D rev 0xc0: msi, address 
04:7d:7b:30:9c:6e
atphy0 at alc0 phy 0: F1 10/100/1000 PHY, rev. 0
ppb2 at pci0 dev 7 function 0 AMD AMD64 14h PCIE rev 0x00: msi
pci3 at ppb2 bus 3
rtsx0 at pci3 dev 0 function 0 Realtek RTS5209 Card Reader rev 0x01: msi
sdmmc0 at rtsx0
ahci0 at pci0 dev 17 function 0 ATI SBx00 SATA rev 0x00: apic 2 int 19, AHCI 
1.2
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0: ATA, ST320LT007-9ZV14, 0004 SCSI3 0/direct 
fixed naa.5000c500451958be
sd0: 305245MB, 512 bytes/sector, 625142448 sectors
ohci0 at pci0 dev 18 function 0 ATI SB700 USB rev 0x00: apic 2 int 18, 
version 1.0, legacy support
ehci0 at pci0 dev 18 function 2 ATI SB700 USB2 rev 0x00: apic 2 int 17
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 ATI EHCI root hub rev 2.00/1.00 addr 1
ohci1 at pci0 dev 19 function 0 ATI SB700 USB rev 0x00: apic 2 int 18, 
version 1.0, legacy support
ehci1 at pci0 dev 19 function 2 ATI SB700 USB2 rev 0x00: apic 2 int 17
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 ATI EHCI root hub rev 2.00/1.00 addr 1
piixpm0 at pci0 dev 20 function 0 ATI SBx00 SMBus rev 0x42: polling
iic0 at piixpm0
spdmem0 at iic0 addr 0x50: 4GB DDR3 SDRAM PC3-10600 SO-DIMM
azalia1 at pci0 dev 20 function 2 ATI SBx00 HD Audio rev 0x40: apic 2 int 16
azalia1: codecs: Conexant/0x506e
audio0 at azalia1
pcib0 at pci0 dev 20 function 3 ATI SB700 ISA rev 0x40
ppb3 at pci0 dev 20 function 4 ATI SB600 PCI rev 0x40
pci4 at ppb3 bus 4
pchb1 at pci0 dev 24 function 0 AMD AMD64 14h Link Cfg rev 0x43
pchb2 at pci0 dev 24 function 1 AMD AMD64 14h Address Map rev 0x00
pchb3 at pci0 dev 24 function 2 AMD AMD64 14h DRAM Cfg rev 0x00
km0 at pci0 dev 24 function 3 AMD AMD64 14h Misc Cfg rev 0x00
pchb4 at pci0 dev 24 function 4 AMD AMD64 14h CPU Power rev 0x00
pchb5 at pci0 dev 24 function 5 AMD AMD64 14h Reserved rev 0x00
pchb6 at pci0 dev 24 function 6 AMD AMD64 14h NB Power rev 0x00
pchb7 at pci0 dev 24 function 7 AMD AMD64 14h Reserved rev 0x00
usb2 at ohci0: USB revision 1.0
uhub2 at usb2 ATI OHCI root hub rev 1.00/1.00 addr 1
usb3 at ohci1: USB revision 1.0
uhub3 at usb3 ATI OHCI root hub rev 1.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
wsmouse1 at pms0 mux 0
pms0: Synaptics clickpad, firmware 8.0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
uvideo0 at uhub1 port 5 configuration 1 interface 0 Ricoh Company Ltd. 
Integrated Camera rev 2.00/20.13 addr 2
video0 at uvideo0
ugen0 at uhub2 port 4 Broadcom Corp Broadcom Bluetooth Device rev 2.00/7.48 
addr 2
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on sd0a (d02babcb5f5d80c4.a) swap on sd0b dump on sd0b
drm: initializing kernel modesetting (PALM 0x1002:0x9806 0x17AA:0x21F0).
radeondrm0: VRAM: 384M 0x - 0x17FF (384M used)
radeondrm0: GTT: 512M 0x1800 - 0x37FF
drm: PCIE GART of 512M enabled (table at 0x0004).
drm: Internal thermal controller without fan control
radeondrm0: 1366x768
wsdisplay0 at radeondrm0 mux 1: console (std, vt100 emulation), using wskbd0
wsdisplay0: screen 1-5 added (std, vt100 emulation)
umass0 at uhub0 port 2 configuration 1 interface 0 HTC Android Phone rev 
2.00/2.28 addr 2
umass0: using SCSI over Bulk-Only
scsibus3 at umass0: 2 targets, initiator 0
sd1 at scsibus3 targ 1 lun 0: HTC, Android Phone,  SCSI2 0/direct 
removable serial.0bb40ff9HT1BFTJ01258

-- 
Dmitrij D. Czarkoff

Re: Linux partition appears as ext2 partition in disklabel

[Dmitrij D. Czarkoff]

Ted Unangst said:
 On Thu, Mar 06, 2014 at 18:49, Dmitrij D. Czarkoff wrote:
  Hello!
  
  I have a strange problem. Recently I added following to my /etc/fstab:
  
/dev/sd0i /mnt/arch ext2fs rw,nodev,nosuid,noexec 0 0
  
  I can't mount this partition using mount -a:
  
$ sudo mount -a
mount: /dev/sd0i: fstab type ext2fs != disklabel type ntfs
 
i:104857600 2048NTFS   # /mnt/arch
 
 Edit the disklabel to say ext2fs?

I was under impression that fdisk edits MBR partitions and disklabel
only edits BSD labels. Anyway:

  $ sudo disklabel -E sd0
  Label editor (enter '?' for help at any prompt)
   p
  OpenBSD area: 104859648-625137345; size: 520277697; free: 15
  #size   offset  fstype [fsize bsize  cpg]
a: 33556384104859648  4.2BSD   2048 163841 # /
b:  8385938138416032swap   # none
c:6251424480  unused   
d:478335360146801984  4.2BSD   4096 327681 # /home
i:104857600 2048NTFS   #
  /mnt/arch
   m i
  offset: [2048] 
  The offset must be = 104859648 and  625137345, the limits of the
  OpenBSD portion
  of the disk. The 'b' command can change these limits.
  

Any other ideas?

-- 
Dmitrij D. Czarkoff

Re: Linux partition appears as ext2 partition in disklabel

[Dmitrij D. Czarkoff]

Kenneth Westerback said:
 delete the partition 'i'. You don't need it, as it will be
 automatically created when necessary.

Thanks!

Apparently it wasn't re-created automatically, but I could rebuild my
disklabel using disklabel -dE sd0, so now it works as expected.

-- 
Dmitrij D. Czarkoff

Re: hey, undeadly WAKE UP

[Dmitrij D. Czarkoff]

O.D. wrote:
 Your blog has potential.

His blog is Undeadly of DragonFlyBSD with the notable exception that the 
list of latest ten items is shown on DragonFlyBSD's home page.

-- 
Dmitrij D. Czarkoff

Re: while trying to compile gettext 0.18.3.2 I see questionable messages

[Dmitrij D. Czarkoff]

On Sunday, February 23, 2014 08:54:34 AM d...@genunix.com wrote:
 I am seeing strange and questionable messages while attempting a compile
 and then test of GNU gettext 0.18.3.2 thus :
 
 ../gnulib-lib/.libs/libgettextlib.so: warning: stpcpy() is dangerous GNU
 crap; don't use it
 ../gnulib-lib/.libs/libgettextlib.so: warning: strcpy() is almost always
 misused, please use strlcpy()
 ../gnulib-lib/.libs/libgettextlib.so: warning: strcat() is almost always
 misused, please use strlcat()
 ../gnulib-lib/.libs/libgettextlib.so: warning: sprintf() is often misused,
 please use snprintf()

What is strange or questionable in these messages?

 Are these messages coming from within the OpenBSD world ?

Yes.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD rootkits

[Dmitrij D. Czarkoff]

Giancarlo Razzolini said:
 Theo, I'm using the word rootkit in the sense I've always knew it, a
 malicious program installed *after *you had gained root access on a
 machine, which it's sole purpose is to maintain the access while ate the
 same time, hiding the fact that it's being done so:
 http://en.wikipedia.org/wiki/Rootkit
 
 Also, I mentioned in one of the first e-mails that are much better ways
 to hide a rootkit. There is not a doubt about that. We were only
 discussing if it is indeed *possible* to have a rootkit using LD_PRELOAD
 on OpenBSD. Just that and nothing else.

Putting something into LD_PRELOAD is nowhere near hiding it, if not
completely opposite.

1. Any competent system administrator will be watching out his
   environment.

2. The actual assignment should happen somewhere in a fairly limited set
   of files (~/.profile, ~/.kshrc or several locations in /etc). Basic
   mtree check defeats such hiding. In fact for files in /etc root
   will even receive a pretty mail message the night addition happens.

3. echo $LD_PRELOAD

That's not to mention that unless someone logs in as root (which is
discouraged in favor of sudo), he isn't affected by root's LD_PRELOAD.

So again: there's not much useful things you can do with this trick. You
can do some nasty things, but whoever has access to root will be aware
of your actions very soon. Given that you already assume that you raised
your privilege to root, basicly with your LD_PRELOAD trick you are
limited to the subset of things you can already do for the similar
period of time, which means that if you actually spend some time on
tempering with LD_PRELOAD, you just wasted this time.

-- 
Dmitrij D. Czarkoff

Re: DVD ISO and mount_udf: FSD does not lie within the partition!

[Dmitrij D. Czarkoff]

Philippe Meunier said:
 # mount_udf /dev/vnd0a /mnt   
  
 FSD does not lie within the partition!
 mount_udf: mount: Invalid argument
 #

AFAIR mount_udf doesn't support the newer versions of UDF. One of such
versions is used in Windows installation disks.
 
 So... how do I access the UDF file system on such a DVD ISO image?

You may use p7zip package (archivers/p7zip in ports):

  $ 7z l windows_7_x64_hp.iso 
  
  7-Zip [64] 9.20  Copyright (c) 1999-2010 Igor Pavlov  2010-11-18
  p7zip Version 9.20 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,2 CPUs)
  
  Listing archive: windows_7_x64_hp.iso
  
  --
  Path = windows_7_x64_hp.iso
  Type = Udf
  Comment = GRMCHPXFRER_RU_DVD
  Cluster Size = 2048
  Created = 2009-07-14 19:57:19
  
 Date  TimeAttr Size   Compressed  Name
  --- -    
  2009-07-14 19:57:19 .  122 2048  autorun.inf
  2009-07-14 19:57:19 Dboot
  2009-07-14 19:57:19 .   262144   262144  boot/bcd
  2009-07-14 19:57:19 .  3170304  3170304  boot/boot.sdi
  2009-07-14 19:57:19 . 1024 2048  boot/bootfix.bin
  2009-07-14 19:57:19 .   112640   112640  boot/bootsect.exe
  2009-07-14 19:57:19 . 4096 4096  boot/etfsboot.com
  2009-07-14 19:57:19 Dboot/fonts
[...]
  2009-07-14 19:57:19 Dupgrade
  2009-07-14 19:57:19 Dupgrade/netfx
  2009-07-14 19:57:19 .  5922304  5922816  upgrade/netfx/netfx.msi
  2009-07-14 19:57:19 . 19210240 19210240  upgrade/netfx/netfx.msp
  2009-07-14 19:57:19 . 16901553 16902144  upgrade/netfx/netfx1.cab
  2009-07-14 19:57:19 .7372873728  
upgrade/netfx/netfxupdate.exe
  --- -    
  3167275251   3168047104  874 files, 199 folders

-- 
Dmitrij D. Czarkoff

Re: OpenBSD rootkits

[Dmitrij D. Czarkoff]

Daniel Cegiełka said:
 yes, it is not possible to pledge a trap for user using LD_PRELOAD.
 hmm... definitely I'm wrong!
 
 but I have another example:
 
 
 --- cat fake.c ---
 
 #define print(s) write(1, (s), sizeof(s) - 1)
 
 int getuid() {
 return 32767;
 }
 
 int geteuid() {
 print(hello from fake geteuid()!\n);
 print(you're );
 return 32767;
 }
 
 --- end cat ---
 
 # shell (as normal user):
 
 cc -shared fake.c -o fake
 LD_PRELOAD=./fake ksh
 
 and type: whoami
 
 As you can see, this is not possible to inject any code in whoami.
 So we can sleep well. It doesn't work on OpenBSD ;]

You perfectly demonstrated your ability to alter the code that will be
run with your privileges. Still, it is useless as the injected code will
be running with your privileges, so this has no practical output. Either
you are able to demonstrate the way you raise your privileges using this
method or you failed to make your point.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD rootkits

[Dmitrij D. Czarkoff]

Giancarlo Razzolini said:
 ... What we are discussing is if it is possible, using
 LD_PRELOAD, to inject code on the execution of any given programs, and
 to be able to hide the fact that the machine has a rootkit installed
 using this method.

So you think that placing rootkit in LD_PRELOAD hides it? I would wonder
about your definition of revealing then.

-- 
Dmitrij D. Czarkoff

Re: OpenBSD packages extremely outdated?

[Dmitrij D. Czarkoff]

Antoine Jacoutot said:
 = on -current (soon to be 5.5) you end up with the same GNOME version (and 
 assorted dependencies) as with the latest Fedora.

AFAIR GNOME packages on OpenBSD normally come a couple of weeks or
months ahead of corresoponding packages on average linux distro. Given
that GNOME increasingly becomes linux-only project, that is very much of
accomplishment, so I would use this opportunity to thank GNOME
maintainers (mostly ajacoutot@ and jasper@ as i gather) for their hard
and fruitful work.

I'm currently dualbooting between OpenBSD and Archlinux, and I didn't
yet notice any significant difference in version numbers (except for
binutils, obviously).

-- 
Dmitrij D. Czarkoff

Re: OpenBSD funding status

[Dmitrij D. Czarkoff]

MJ said:
 Again, and I really need to highlight this: when the project comes to
 the position that it is asking for money or die, then the project is
 also in a requirement to provide financial transparency.

You appear to see no difference between donation and investment. OpenBSD
is asking for donations - financial support for things they already do
and are expected to do in future. They don't promise anything beyond the
stuff they normally deliver - sane Unix-like BSD-flavored operating
system, so there's quite enough of transparency: they did it for nearly
20 years and everyone may inspect the progress with per-commit
precision.

I would also note that it could possibly make sense for some corporate
sponsor to ask for some level of financial disclosure in case of some
big donation, but that's not the case here: the people who ask for it
are not the people who are going to donate anything. (Of course unless
you really believe that a person behind single-purpose account asking
trollish questions is really considering donating the money he doesn't
even quantify.)

-- 
Dmitrij D. Czarkoff

Re: problems with non-utf8 characters in mutt after upgrading to 5.4

[Dmitrij D. Czarkoff]

Kārlis Miķelsons said:
 Latin1 mail with umlauts and sz in sender's name mail body renders
 fine here in mutt in xterm in the UTF-8 locale. So you should be
 able to get it to work. I suspect misconfiguration rather than a bug,
 though a bug is of course a possibility.
 
 What does your local configuration look like?
 Are you aware of http://www.openbsd.org/faq/faq10.html#locales ?
 Yes, I've got export LC_CTYPE=en_US.UTF-8 in my .xinitrc.
 
 $ env | grep LC
 LC_CTYPE=en_US.UTF-8
 $ locale
 LANG=
 LC_COLLATE=C
 LC_CTYPE=en_US.UTF-8
 LC_MONETARY=C
 LC_NUMERIC=C
 LC_TIME=C
 LC_MESSAGES=C
 LC_ALL=

Mutt works OK for me with multiple sets of non-ASCII charecters,
including advanced punctuation, cyrillic, extended Latin, etc.
(Basically everything one may possibly need for English, Serbo-Croatian,
Russian and French).

$ locale
LANG=en_US.UTF-8
LC_COLLATE=C
LC_CTYPE=en_US.UTF-8
LC_MONETARY=C
LC_NUMERIC=C
LC_TIME=C
LC_MESSAGES=en_US.UTF-8
LC_ALL=en_US.UTF-8

I guess you could try setting LC_MESSAGES (if mutt happens to take it
for display charset, this trick my work - I can't test it right now).

FWIW did you make sure UTF-8 works on your terminal at all? Did you try
mutt in uxterm?

-- 
Dmitrij D. Czarkoff

Re: Is Ext2 stable enough for normal use?

[Dmitrij D. Czarkoff]

On Thursday, January 02, 2014 02:51:52 PM Geoff Steckel wrote:
 In return, of course, that Linux wouldn't mount an OpenBSD FFS.

Currently I have dualboot between Archlinux and OpenBSD, and I FFS mounted in 
Arch, albeit read-only. (I don't have ext mounted on OpenBSD though, but I 
don't need it anyway.)

Re: Samsung 840 Pro SSD : Incompatible with OpenBSD or defective?

[Dmitrij D. Czarkoff]

On Friday, January 03, 2014 11:08:38 PM Ted Unangst wrote:
 or you have a broken usb-sata adapter.

This may indicate that the flash storage on your USB stick is wearing out. You 
may want to try network install (boot off from your USB stick but install from 
internet via cable connection).

Re: hp mini 200 - kernel panic with ACPI on 5.4

[Dmitrij D. Czarkoff]

Stuart Henderson said:
 On 2013/11/26 17:39, Dmitrij D. Czarkoff wrote:
  Hello!
  
  I've got my hands on HP Mini 200, which panics with ACPI enabled. Disabling
  ACPI makes it boot. Most likely I'll keep it until next Tuesday, so if the
  issue is of any interest, and there is more information I can provide, ask
  freely.
  
  trace, ps and panic from ddb are below, followed by dmesg, pcidump and
  base64-encoded archive with acpidump output. All of this was collected from
  bsd image; bsd.mp behaves similarily.
 
 Is there any difference with a -current snapshot?

I can't find any - the same panic with the same trace, though the
-current snapshots seems to spend a bit more time booting up.

-- 
Dmitrij D. Czarkoff

hp mini 200 - kernel panic with ACPI on 5.4

[Dmitrij D. Czarkoff]

Hello!

I've got my hands on HP Mini 200, which panics with ACPI enabled. Disabling
ACPI makes it boot. Most likely I'll keep it until next Tuesday, so if the
issue is of any interest, and there is more information I can provide, ask
freely.

trace, ps and panic from ddb are below, followed by dmesg, pcidump and
base64-encoded archive with acpidump output. All of this was collected from
bsd image; bsd.mp behaves similarily.

--
Dmitrij D. Czarkoff


ddb trace
Debugger(d0962f00,d0c3b374,d0a3f73e,d0c3b374,d1e40c84) at Debugger+0x4
panic(d0a3f73e,d0a3537,82c,0,40) at panic+0x5d
_aml_die(d0a3f537,82c,d0a3f774,1,0) at _aml_die+0x135
aml_convert(d1e3f584,0,,0,d1e3f584) at aml_convert+0x7a
aml_compare(d1e3c484,d1e3f584,9293,0,0) at aml_compare+0x2b
aml_parse(d1e39744,69,d0a08d31,d1e3ea80,40) at aml_parse+0xcbf
aml_parse(d1e39744,69,d0a3fc96,0,d1e3ea84) at aml_parse+0x1bb
aml_parse(d1e40ec4,54,d0a3fb50,14,d1e40984) at aml_parse+0x1bb
aml_eval(d1e3c804,d1e26a44,69,0,0) at aml_eval+0x21c
aml_parse(d1e3c804,69,d0a3fc96,d0c3b6f8,40) at aml_parse+0x1e3d
aml_parse(d1e3c804,54,d0a3fb50,14,0) at aml_parse+0x1bb
aml_eval(d1e3ebc4,d1e26e44,54,0,0) at aml_eval+0x21c
aml_parse(d1e3f984,54,d0a3fb50,14,0) at aml_parse+0x1e3d
aml_eval(d1e3f084,d1e1f144,54,0,0) at aml_eval+0x21c
aml_parse(d1e3f084,54,d0a3fb50,14,d0c3b927) at aml_parse+0x1e3d
aml_eval(0,d1e1ea04,74,2,d0c3b988) at aml_eval+0x21c
aml_evalnode(d1df9200,d1e1e9c4,2,d0c3b988,0) at aml_evalnode+0x68
acpiec_reg(d1dfd800,d0c3baf4,4,10,0) at acpiec_reg+0x8d
acpiec_attach(d1df9200,d1dfd800,d0c3baf4,d043f1ab,0) at acpiec_attach+0x51
config_attach(d1df9200,d0a476a0,d0c3baf4,d0897f80,d0c3bac0) at config_attach+0x
1bb
acpi_foundec(d1e1bc84,d1df9200,0,0,0) at acpi_foundec+0xcd
aml_find_node(d1e1bc84,d0a3eddb,d0897af0,d1df9200,100b) at aml_find_node+0x7d
aml_find_node(d1e14044,d0a3eddb,d0897af0,d1df9200,0) at aml_find_node+0x6e
aml_find_node(d1e14184,d0a3eddb,d0897af0,d1df9200,d0a4d7f4) at aml_find_node+0x
6e
aml_find_node(d1e12a44,d0a3eddb,d0897af0,d1df9200,d0a4d7f4) at aml_find_node+0x
6e
aml_find_node(d1dfb144,d0a3eddb,d0897af0,d1df9200,d0935062) at aml_find_node+0x
6e
aml_find_node(d0b74720,d0a3eddb,d0897af0,d1df9200,0) at aml_find_node+0x6e
acpi_attach(d1dfb040,d1df9200,d0c3bd74,d043f1ab,0) at acpi_attach+0x5b9
config_attach(d1dfb000,d0a46640,d0c3be54,d0602b80,30c0) at config_attach+0x
1bb
mainbus_attach(0,d1dfb000,0,d0a44040,0) at mainbus_attach+0x4e
config_attach(0,d0a44040,0,0,d0ab7a00) at config_attach+0x1bb
config_rootfound(d0961f0c,0,0,d042ff31,0) at config_rootfound+0x46
cpu_configure(d0b73880,1,1000,cff3f000,1) at cpu_configure+0x29
main(d02004f6,d02004fe,0,0,0) at main+0x3dd
ddb ps
   PID   PPID   PGRPUID  S   FLAGS  WAIT  COMMAND
*0 -1  0  0  7   0x200swapper
ddb show panic
aml_die aml_convert:2092


OpenBSD 5.4 (GENERIC.MP) #44: Tue Jul 30 12:13:32 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Atom(TM) CPU N2600 @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC
real mem  = 1061408768 (1012MB)
avail mem = 1032597504 (984MB)
User Kernel Config
UKC disable acpi
483 acpi0 disabled
UKC exit
Continuing...
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 07/26/12, BIOS32 rev. 0 @ 0xef725, SMBIOS 
rev. 2.7 @ 0xe3d40 (19 entries)
bios0: vendor Hewlett-Packard version F.06 date 07/26/2012
bios0: Hewlett-Packard HP Mini 200
acpi at bios0 function 0x0 not configured
mpbios0 at bios0: Intel MP Specification 1.4
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 99MHz
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) CPU N2600 @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC
mpbios0: bus 0 is type PCI   
mpbios0: bus 1 is type PCI   
mpbios0: bus 2 is type PCI   
mpbios0: bus 3 is type PCI   
mpbios0: bus 4 is type ISA   
ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins
pcibios0 at bios0: rev 3.0 @ 0xef220/0x8cc
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfe1b0/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0xf400!
cpu0: unknown Enhanced SpeedStep CPU, msr 0x063010470600104e
cpu0: using only highest, current and lowest power states
cpu0: Enhanced SpeedStep 1596 MHz: speeds: 1600, 1600, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 vendor Intel, unknown product 0x0bf1 rev 0x03
vga1 at pci0 dev 2 function 0 Intel Atom D2000/N2000 Video rev 0x09
intagp at vga1 not configured

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Marc Espie said:
 On Fri, Nov 15, 2013 at 07:39:41AM +0100, Tomas Bodzar wrote:
  On Fri, Nov 15, 2013 at 6:01 AM, za...@gmx.com wrote:
  
   Hi
  
   I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone managed
   to do that?
   I suppose I would have to install Windows first, and then OpenBSD.
   Does the OpenBSD installation include a boot manager such as GRUB?
   I have experience setting up dual booting with GRUB, when installing
   Linux. Is it ok if I follow the same procedure with OpenBSD? If not, how
   would you advise me to go about it?
  
  
  
  Why don't you follow official guide mentioned zillion of times everywhere
  around here?
  http://www.openbsd.org/faq/faq4.html#Multibooting
 
 Did you actually read that ? notice how it stops with Windows Vista/7 ?

I was planning to send a diff - I dualboot OpenBSD and Windows 8.1, and
all the steps to set it up are the same. The only thing to keep in mind
about Windows 8+ is that it initializes graphics if Windows is chosed as
default OS, which takes quite a lot of time.

I didn't try GPT setup, though I believe it could be done easily
regardless lack of GPT support in OpenBSD. If there is enough interest,
I could make a go for GPT Windows and OpenBSD dualboot and send a diff
for FAQ if my idea works out.

-- 
Dmitrij D. Czarkoff

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Dmitrij D. Czarkoff said:
  Did you actually read that ? notice how it stops with Windows Vista/7 ?
 
 I was planning to send a diff - I dualboot OpenBSD and Windows 8.1, and
 all the steps to set it up are the same. The only thing to keep in mind
 about Windows 8+ is that it initializes graphics if Windows is chosed as
 default OS, which takes quite a lot of time.

Here is the patch for FAQ. My English isn't particularly good, so please
fix as needed.

I'm not particularly sure 8.1 is worth mention, as Windows 8.1 relates
to Windows 8 the same way Windows 7 Service Pack 1 relates to Windows 7.
I included it just because of this question here.


Index: faq/faq4.html
===
RCS file: /var/cvs/www/faq/faq4.html,v
retrieving revision 1.331
diff -u -p -r1.331 faq4.html
--- faq4.html   7 Nov 2013 00:08:45 -   1.331
+++ faq4.html   15 Nov 2013 05:00:40 -
@@ -2555,7 +2555,7 @@ For those who find manual configuration 
 a href=http://neosmart.net/dl.php?id=1;EasyBCD/a provides a GUI
 alternative.
 
-h3Windows 7/h3
+h3Windows 7, 8, 8.1/h3
 
 p
 Microsoft has enhanced BCD since releasing Vista to allow multiple
@@ -2597,6 +2597,14 @@ The operation completed successfully.
 
 C:\Windows\system32
 /pre/blockquote
+
+p
+Note: starting with Windows 8 Microsoft changed the boot process so that if
+Windows is selected as default boot option, bootloader loads graphical
+touch-capable boot menu, which takes much more time to start.  Conversely, if
+OpenBSD is selected as default boot option, the classic console
+keyboard-driven menu is presented to the user.  Default option may be set in
+graphical boot menu itself.
 
 h3Other boot loaders/h3
 

-- 
Dmitrij D. Czarkoff

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Marc Espie said:
 You could point the guy at the FAQ, with caveats since the FAQ *doesn't
 cover his specific case*.  But your way of phrasing your answer is not
 a polite way to put it, and it's completely unjustified !

FAQ never covers one's specific case - it covers general case and has to
be applied to the situation. Windows 7 instructions work for Windows 8,
and before asking on mailinglist OP should have tried it. If it failed,
his query should have been:

  I tried to set up dualbooting Windows 8.1 with OpenBSD following the
  advice for Windows 7 from FAQ 4.9, but at the step *N* (command *cmd*)
  it failed. Did anyone have success with setting up Windows 8 and
  OpenBSD to play together in dualboot?

Instead we got a general query *before* any action.

Keep in mind that potential risk boiled down to wasted space on the hard
drive, which could be easily reclaimed for OS the OP would prefer if
dualboot was impossible.

I see no way to defend OP against lack of proper research allegation.

-- 
Dmitrij D. Czarkoff

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Peter Hessler said:
 On 2013 Nov 15 (Fri) at 07:01:35 +0100 (+0100), Dmitrij D. Czarkoff wrote:
 :I see no way to defend OP against lack of proper research allegation.
 
 It would be nice though, if people would stop actively being dicks.  

When I only came to OpenBSD, my dislike for being slapped in public was
a great motivating factor for doing my research before posting. In fact
I owe some of my documentation mining skills to the practice you call
actively being dicks, and thus I'm not so sure this practice should be
regarded as a downside of this list.

That's my personal experience, your mileage may vary.

-- 
Dmitrij D. Czarkoff

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Kirill Bychkov said:
 I can't agree with that. You can test something not in FAQ if you are sure it
 will make no harm to your system. Dance with bootloaders and partition
 managers could lead to catastrophe if you make an error.

 [snip]

 Keep in mind that potential risk boiled down to wasted space on the hard
 drive, which could be easily reclaimed for OS the OP would prefer if
 dualboot was impossible.

Well, I don't really understand the meaning you put behind the word
catastrophe, given that the action in subject is the installation of
two operating systems. You can't reinstall OS without loosing data, so I
assume that all data from hard disks is backed up, and the only resource
to waste is the time. Even then, again, given due precausion you don't
really risk any data loss for any of the OSs.

 We all know, than M$ always inventing new traps for alternative OS.

Care to elaborate? I'm not aware of any traps regarding disk management.

 And their boot process organization is one of that traps.

Again, care to elaborate? Where's the actual trap?

-- 
Dmitrij D. Czarkoff

Re: Dual booting OpenBSD and Windows 8.1

[Dmitrij D. Czarkoff]

Marc Espie said:
  Keep in mind that potential risk boiled down to wasted space on the hard
  drive, which could be easily reclaimed for OS the OP would prefer if
  dualboot was impossible.
 
 Oh really ? you've never managed to put an OS out of commission by trying
 to multiboot ? you've never had a so-called install program just reclaim
 all of your hard-drive ?

Not a single time. I'm not actually sure whether any version of Windows
ever came with installer that would silently reclaim space - they lean
toward failing to occupy free space once they reach something they don't
understand.
 
 esp. with Windows where it can be *very* tiresome and difficult to track
 all the pieces you need to reinstall (especially with recent OEM stuff
 which does not even provide you with any boot media!)

When I set the dualboot environment up, I first install the OSs, then
set up dualboot, and once it is working I set up the systems. I deny a
claim that anyone doing it another way may possibly be right.

-- 
Dmitrij D. Czarkoff